both cnn and npr have reported that banks which are not within fcc's jurisdiction are selling information that they collect from credit and debit purchases. that is, they are selling their consumers entire purchase histories to retailers. also privacy legislation -- if such legislation is limited to a select group of data collected. for example, if privacy legislation is limited to companies within the ftc's jurisdiction, as are many of the current proposals, the house and the senate, retailers such as amazon would be limited in collecting and selling data about a consumers shopping habit. citibank would be totally free to collect and sell that same information to amazon. do any of you have any concerns about such a scenario? >> i can address the question, and i will do it in reference to the draft bill that was discussed earlier, the data act, where the agency does have a concern if drafted. breach notification, there's a carpet for entities that we subject to the ftc's jurisdiction so we do have a concern about that gap. >> some have suggested that any data security legislation on priva